Product Documentation
Dex Pro Documentation
The autonomous IT engineer for IT administrators. Investigate, plan, and execute multi-step admin workflows across Microsoft 365, Google Workspace, Okta, and any connected SaaS, in natural language.
Core Principle
If you have the permission to do it as an admin and the platform exposes an API for it, Dex Pro can handle it. That covers Microsoft 365, Google Workspace, Okta, and any SaaS you connect. It's not limited to pre-defined scripts — it reasons about your request and determines the right sequence of actions.
Getting Started
Describe what you need in plain language. Dex Pro will investigate, build a plan, and execute — with your approval on any changes.
Example prompts
- "Reset Jane Smith's password and revoke all active sessions"
- "User can't log in — investigate why, find the root cause, and fix it"
- "Find license waste: which E5 users only use E3 features?"
- "Device not syncing — retrieve BitLocker key, force Intune sync, and verify compliance"
- "Upload this Excel file and provision all 50 new hires"
- "Suspend the leaver in Google Workspace, transfer their Drive files to their manager, and remove them from every Okta app"
How It Works
Dex Pro follows a six-step reasoning loop for every request:
You request
Describe what you need in natural language.
Dex Pro investigates
Autonomously gathers context through read-only checks.
Dex Pro plans
Breaks down the request into an optimal sequence of steps.
You approve
Review the plan and evidence before any changes are made.
Dex Pro executes
Performs approved actions directly in Microsoft 365, Google Workspace, Okta, or any connected platform.
You see results
A complete summary of what was done, including evidence and time saved.
Built for async work: If Dex Pro needs your approval or additional consent, the task pauses. Step away for a meeting and resume exactly where you left off.
Capabilities
Complex Troubleshooting
Investigate login failures, audit sign-in history, identify root causes, and apply fixes. Handle device issues like BitLocker key retrieval, remote reboots, or forced Intune syncs.
Bulk & Data-Driven Operations
Upload Excel files for mass provisioning, bulk organization updates (titles, managers, departments), or group membership management. Dex Pro executes the plan and provides a completion report.
Deep Analysis & Optimization
Find license waste by identifying overprovisioned users. Audit SharePoint sprawl to find ownerless, inactive, or duplicate sites. Search tenant-wide for sensitive documents.
Security & Incident Response
Contain compromised accounts by revoking sessions, disabling access, and pulling evidence. Monitor certificate expiries and unmanaged device access.
On-the-Fly Integrations
Need a platform Dex is not connected to yet? Dex Pro fetches its API documentation, builds the integration, stores the credentials securely, and uses it in the same conversation. Any SaaS with a REST API.
Dex Admin: Administer Dex Itself
Manage the Dex platform from chat: assign Dex Pro seats and Dex Admin rights, edit policies and approval rules, enable or disable apps, deploy device agents, and change org settings. Available to Dex Admins in Dex Pro only, never in Dex Go, and every action is logged.
Human-in-the-Loop Safety
Dex Pro distinguishes between checking (read-only) and changing (mutating) operations:
Read-only checks
Gathering info, pulling logs, reading configurations — happen autonomously so Dex Pro can build its plan.
Mutating actions
Creating, deleting, or updating resources — always require your explicit approval.
Approval Options
| Option | Behavior |
|---|---|
| Approve Once | Execute this specific action now. |
| Approve Always | Auto-approve this type of routine task going forward. Manage or revoke these rules anytime from Settings → Permissions. |
| Dry Run | Simulate the entire operation without making real changes. Ideal for testing complex workflows safely. |
Managing Multiple Tasks
You can trigger bulk prompts that automatically split into individual tasks, for example: "Reset passwords for all users in the Sales department" or "Provision 20 new employees from this Excel file." Each task runs independently and appears in your side panel chat history.
Task Statuses
Active
Attention Needed
Completed
Tip: Look for yellow status badges to see which tasks need your attention.
Capacity & Usage
Priced per technician, measured in tasks
Dex is priced per technician who operates it, with capacity counted in tasks. Every plan is the whole product; plans differ only in capacity. Each technician has a personal allowance of tasks for their Dex Pro work, and every seat adds to the shared pool that powers Dex Go for every employee. Capacity refreshes weekly, so a heavy week never eats the whole month.
About 150
Tasks a month on Standard
Per technician. Max is about 450, and a Max seat adds three times as much to the shared Dex Go pool.
Weighted
Tasks count by effort
A password reset counts as about a quarter of a task, offboarding an employee one to two, a hard device fault about eight. Setup and configuration never count.
Paused
Never billed for overage
If a technician runs out, Dex pauses their new work rather than charging. Add a $100 top-up (about 150 tasks, valid a year) or move the technician to Max at any time.
Plans, prices, and the full capacity model are on the pricing page.
Security & Data Privacy
Three-Layer Security Model
Identity-Driven
Dex Pro uses delegated permissions from your authenticated session. It can only perform actions you are authorized to perform. All actions are tied to your admin identity and appear in your audit trail.
Consent-Aware
If a task requires a permission scope you haven't granted, Dex Pro pauses and asks for your explicit consent before proceeding.
Audit-Ready
Every action is logged in the connected platform's own audit logs (Microsoft 365, Google Workspace, Okta) and in the Dex Activity Log, maintaining the same compliance and governance as any admin action you take manually.
Data Handling
Dex Pro never stores your directory or tenant data. It reads only what's needed to complete your request, performs approved actions, and discards temporary data. You can revoke access at any time from the connected platform, for example the Microsoft 365 admin center or the Google Admin console.
Required Permissions
On Microsoft 365, Dex Pro uses standard Microsoft Graph scopes for user, group, device, license, and authentication-method management, plus SharePoint and Exchange for content operations. Google Workspace uses the Admin SDK and Okta uses OAuth or an API token. Every platform is accessed with delegated permissions, so Dex Pro can never do more than you can.